Update http headers (#16)

* Update HTTP Headers * Fix rubocop offenses
OpenSourcePolitics · Mar 2, 2022 · daab7b7 · daab7b7
1 parent 4466b0d
commit daab7b7
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/config/application.rb b/config/application.rb
@@ -31,6 +31,12 @@ class Application < Rails::Application
 
     config.backup = config_for(:backup).deep_symbolize_keys
 
+    config.action_dispatch.default_headers = {
+      "X-Frame-Options" => "SAMEORIGIN",
+      "X-XSS-Protection" => "1; mode=block",
+      "X-Content-Type-Options" => "nosniff"
+    }
+
     # Settings in config/environments/* take precedence over those specified here.
     # Application configuration can go into files in config/initializers
     # -- all .rb files in that directory are automatically loaded after loading